Ubuntu 25.10: Samba Critical Issues USN-7826-1 CVE-2025-9640 CVE-2025-10230

ubuntu

October 16, 2025

Several security issues were fixed in Samba.

Summary

Several security issues were fixed in Samba.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Andrew Walker discovered that Samba incorrectly initialized memory in the

vfs_streams_xattr module. An authenticated attacker could possibly use this

issue to obtain sensitive information. (CVE-2025-9640)

Igor Morgenstern discovered that Samba incorrectly handled names passed to

the WINS hook program. An attacker could possibly use this issue to execute

arbitrary code. (CVE-2025-10230)

Topics Covered

security advisory critical samba Ubuntu arbitrary code information disclosure

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  samba                           2:4.22.3+dfsg-4ubuntu2.1

Ubuntu 25.04
  samba                           2:4.21.4+dfsg-1ubuntu3.5

Ubuntu 24.04 LTS
  samba                           2:4.19.5+dfsg-4ubuntu9.4

Ubuntu 22.04 LTS
  samba                           2:4.15.13+dfsg-0ubuntu1.10

In general, a standard system update will make all the necessary changes.